A vulnerability was found in Tenda AC10 16.03.10.13. It has been classified as problematic. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Performing manipulation results in hard-coded credentials.
This vulnerability was named CVE-2025-9309. The attack needs to be approached locally. In addition, an exploit is available.